CVE-2025-26497

Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux Flow Editor modules allows Absolute Path Traversal.This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19...

CVE-2025-26497

Salesforce Tableau Server is vulnerable to an Unrestricted Upload of File with Dangerous Type in the Flow Editor modules on Windows and Linux. This flaw allows for Absolute Path Traversal , potentially enabling attackers to upload files of dangerous types to unauthorized locations. The vulnerabil...